Senior CyberArk Security Engineer

We are looking for an experienced Senior CyberArk Security Engineer to join our global Privileged Access Management (PAM) Engineering team and help strengthen the security, automation, resilience and reliability of our enterprise PAM platform.This is a hands-on engineering role where you will solve complex security and production challenges, build automation and integrations, contribute to platform modernization, and continuously improve how CyberArk services are designed, operated and supported.You will partner with IAM, Security, Cloud, Infrastructure, Network, Operations and application teams across multiple regions. You will take ownership of complex engineering initiatives and production issues while providing technical guidance, sharing knowledge and helping strengthen engineering practices across the team.Position Responsibilities:Design, implement, enhance and support enterprise CyberArk Privileged Access Management solutions.Engineer, configure and troubleshoot CyberArk Digital Vault, PVWA, CPM, PSM, Credential Provider and CCP components.Lead technical activities for CyberArk implementations, upgrades, migrations, infrastructure changes and platform modernization initiatives.Develop and enhance CPM plugins, PSM connectors and application integrations to support evolving business and technology requirements.Integrate applications and enterprise technologies with CyberArk using REST APIs, CCP, Credential Provider and other integration approaches.Build automation using PowerShell, REST APIs, PACLI and other scripting technologies to reduce repetitive manual work, improve consistency and strengthen platform reliability.Serve as a senior technical escalation point for the Operations team, leading investigation and resolution of complex production and CyberArk platform issues.Perform root-cause analysis across application, identity, operating system, network and infrastructure layers, driving issues through investigation, remediation, testing and permanent resolution.Contribute to disaster recovery, patching, vulnerability remediation, platform hardening and lifecycle management activities.Identify and implement opportunities to improve security, automation, resilience, scalability and operational efficiency.Contribute to technical designs, engineering standards, implementation procedures and knowledge documentation.Serve as a CyberArk technical subject-matter expert, contributing to technical design and architecture discussions while mentoring other engineers and sharing engineering best practices.Required Qualifications:Relevant professional experience in cybersecurity, information technology, engineering or a related technical field. A bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems or a related discipline is welcome, but equivalent relevant professional experience is equally valued.Approximately 5+ years of relevant Privileged Access Management or cybersecurity experience, including substantial hands-on CyberArk engineering experience.Experience engineering and supporting core CyberArk components, including Digital Vault, PVWA, CPM and PSM.Experience implementing, upgrading, integrating or enhancing CyberArk environments within enterprise technology environments.Experience integrating CyberArk with applications and enterprise technologies using REST APIs, CCP, Credential Provider or comparable integration approaches.Scripting and automation experience, particularly with PowerShell and REST APIs, with a focus on reducing manual activities and improving platform reliability.Strong troubleshooting and root-cause analysis capabilities across CyberArk, identity, Windows and infrastructure technologies.Knowledge of Windows Server and Active Directory, with exposure to technologies such as Linux/Unix, databases, networking, cloud or other enterprise platforms.Ability to take ownership of complex technical work while collaborating effectively across engineering, security, infrastructure and application teams.Clear written and verbal communication skills, including the ability to create technical documentation and provide technical guidance and mentorship to other engineers.Preferred Qualifications:Experience with one or more of the following would be an asset. You do not need to have experience in all of these areas to be considered:CyberArk Defender, Sentry or another relevant CyberArk technical certification.CISSP, CISM or another recognized cybersecurity certification.Development or customization of CyberArk CPM plugins and PSM connectors.PACLI and advanced CyberArk automation.SAML, LDAP, SailPoint or other IAM technologies.CyberArk Endpoint Privilege Manager (EPM).CyberArk monitoring, reporting or automated platform health checks.Disaster recovery, resiliency testing, vulnerability remediation or infrastructure hardening.Microsoft Azure or another enterprise cloud platform.What Will Make You Successful:You approach CyberArk as an engineering platform, going beyond day-to-day administration to solve complex problems, build automation, develop integrations and continuously improve platform security and reliability.You are curious and comfortable investigating issues across application, identity, operating system, network and infrastructure layers. You can take ownership of complex engineering and production issues while bringing in the right partners when collaboration is needed.You look for opportunities to automate repetitive work rather than rely on manual processes, and you enjoy improving engineering practices, sharing knowledge and helping other engineers develop their capabilities.Most importantly, you combine deep technical problem-solving with a practical mindset: build secure solutions, keep critical services reliable, learn from production issues and make the platform better over time.When You Join Our Team:We’ll empower you to learn and grow the career you want.We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.As part of our global team, we’ll support you in shaping the future you want to see.The role being advertised is an existing vacancy.About Manulife and John HancockManulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit .Manulife is an Equal Opportunity EmployerAt Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact View email address on click.appcast.io Salary LocationToronto, OntarioWorking ArrangementHybridSalary range is expected to be between$113,000.00 CAD - $163,000.00 CADEmployees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact View email address on click.appcast.io for the salary range for your location.Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact View email address on click.appcast.io for more information about U.S.-specific paid time off provisions.We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.SummaryLocation: Toronto, Ontario; Waterloo, OntarioType: Full time